APriestman
|
a0349b3fb7
|
Removed reference to TSK_PROCESSOR_NAME from RecentActivity.
|
2015-01-29 08:40:10 -05:00 |
|
APriestman
|
f379f83e15
|
Reverted two reg ripper plugins that we had previously modified to not print a bunch of error information when the keys weren't found.
|
2015-01-26 09:51:42 -05:00 |
|
APriestman
|
8ac91c2cb8
|
Combine OS attributes found in the registry.
|
2015-01-23 13:30:27 -05:00 |
|
APriestman
|
93eb80364a
|
Reducing the number of duplicate account names reported by ExtractIE in RecentActivity.
|
2014-12-03 14:57:06 -05:00 |
|
APriestman
|
fe62624541
|
Updated RecentActivity to use RegRipper 2.8.
Added additional RegRipper modules to support STIX data.
Stopped RecentActivity IE parser from generating empty user accounts.
|
2014-12-03 14:21:14 -05:00 |
|
APriestman
|
0fe22cc94c
|
Added regripper modules needed for STIX
|
2014-11-24 14:26:35 -05:00 |
|
Richard Cordovano
|
d69c03d4da
|
Merge pull request #962 from karlmortensen/report_generator
Report generator
|
2014-11-20 18:36:40 -05:00 |
|
Brian Carrier
|
1cfbda53d7
|
Changed Regripper to make an Autopsy report instead of TOOL_OUTPUT to make it easier to use
|
2014-11-18 14:39:36 -05:00 |
|
Karl Mortensen
|
d7deec052d
|
remove duplicate domain. Set it to TSK_URL_DECODED
|
2014-11-17 15:58:22 -05:00 |
|
Karl Mortensen
|
fa8a3597b2
|
Fix report generation to include more artifacts and attributes
|
2014-11-17 15:39:22 -05:00 |
|
Richard Cordovano
|
caff69063d
|
Make sure the correct reg ripper copy is run by the recent activity module
|
2014-11-07 17:44:38 -05:00 |
|
Richard Cordovano
|
2562cd684e
|
Fix typos in recent activity module
|
2014-11-06 22:04:23 -05:00 |
|
Richard Cordovano
|
cb01eb40cd
|
Make recent activity module cancellable
|
2014-11-06 21:14:26 -05:00 |
|
esaunders
|
6b7380f2d0
|
Replace NUL bytes in RegRipper output with spaces. If we don't do this the XML parser will fail.
|
2014-11-05 16:55:29 -05:00 |
|
Eamonn Saunders
|
780d40971d
|
- Modified ExtractRegistry.java to attach Windows version info to TSK_OS_INFO artifact instead of TSK_INSTALLED_PROGRAM.
- Added new icon for "Operating System Information" to UI and Report.
- Added TSK_OS_INFO artifact to report.
|
2014-10-15 16:31:12 -04:00 |
|
Eamonn Saunders
|
d276f54077
|
Added a new RegRipper plugin to determine processor architecture and modified ExtractRegistry.java to create a new TSK_OS_INFO artifact with a single TSK_PROCESSOR_ARCHITECTURE attribute.
|
2014-10-14 13:18:12 -04:00 |
|
Brian Carrier
|
5e4ed7d047
|
refactored search engine, used list to make it more deterministic
|
2014-08-19 10:37:12 -07:00 |
|
Brian Carrier
|
e5230e5a79
|
Reduce database round trips in registry parsing code
|
2014-07-28 13:52:38 -04:00 |
|
Brian Carrier
|
e5026a108b
|
Changed uses of Java loggger to Autopsy logger
|
2014-07-10 17:13:40 -04:00 |
|
Brian Carrier
|
85548bd89b
|
Updated version numbers for 3.1.0
|
2014-07-09 12:10:09 -04:00 |
|
Nick Davis
|
2a2b8ba847
|
Re-added newlines to strings in properties files.
|
2014-07-02 21:10:39 -04:00 |
|
Richard Cordovano
|
9be692953c
|
Merge pull request #800 from sleuthkit/db_threading
Fix error message format error
|
2014-06-24 16:02:48 -04:00 |
|
Richard Cordovano
|
7a0bb1e22b
|
Fix error message format error
|
2014-06-24 16:00:50 -04:00 |
|
Brian Carrier
|
4b5ce43726
|
Merge branch 'develop' of github.com:sleuthkit/autopsy into develop
|
2014-06-23 13:47:55 -04:00 |
|
Brian Carrier
|
ce69ad93fa
|
Ensure USB make is in proper place even if initial entries don't specify it
|
2014-06-16 14:57:20 -04:00 |
|
Kay Bassi
|
062e8c3d75
|
Translation completed.
|
2014-06-13 12:52:53 -07:00 |
|
Nick Davis
|
97ba007fbb
|
Extracted newly added string to bundle.
Fixed spelling.
|
2014-06-13 13:45:06 -04:00 |
|
Brian Carrier
|
f12ec3da88
|
fixed #742 to use webkit format time in Chrome instead of PRTime format
|
2014-06-12 21:33:15 -04:00 |
|
Brian Carrier
|
f91c53fe3e
|
Merge branch 'develop' of github.com:sleuthkit/autopsy into develop
|
2014-06-06 11:14:24 -04:00 |
|
Brian Carrier
|
1924ff4750
|
stop executils when it is not needed anymore. Remove stop method from recent activity since it is no longer needed.
|
2014-06-06 11:14:15 -04:00 |
|
Brian Carrier
|
26e01a6cb0
|
Merge branch 'develop' of github.com:sleuthkit/autopsy into develop
|
2014-06-05 23:24:03 -04:00 |
|
Brian Carrier
|
bd2f97da4c
|
Allow DS modules to supply sub-title of progress bar and updated RecentActivity to use it
|
2014-06-05 23:23:54 -04:00 |
|
Brian Carrier
|
1d3b1dab67
|
USB device parser adds vendor name when product code isn't known
|
2014-05-30 00:20:51 -04:00 |
|
Richard Cordovano
|
99fd68b1c5
|
Change data source ingest behavior
|
2014-05-15 15:39:42 -04:00 |
|
Richard Cordovano
|
33439ecb43
|
Merge pull request #681 from mrtizmo/recentactivity-ja
RecentActivity additional Japanese translations
|
2014-04-23 10:34:44 -04:00 |
|
Kay Bassi
|
c508b6af5f
|
Translation complete. Checked for inconsistencies.
|
2014-04-22 17:18:22 -04:00 |
|
Nick Davis
|
cb8057e66a
|
Pulled new static string.
|
2014-04-22 17:06:49 -04:00 |
|
Nick Davis
|
85083eeaac
|
RecentActivity - Added NON-NLS tags to hardcoded strings not needing National Language Support.
|
2014-04-22 15:52:40 -04:00 |
|
Nick Davis
|
6c5ffc8e3b
|
Removed unused strings from Bundle.
|
2014-04-15 17:48:30 -04:00 |
|
Nick Davis
|
de73225c13
|
Pulled strings into Bundle.
Translated strings.
|
2014-04-15 17:36:32 -04:00 |
|
Richard Cordovano
|
5d4f5f1636
|
Corrected log message format errors in recent activity extracter ingest module
|
2014-04-10 17:27:35 -04:00 |
|
Richard Cordovano
|
708dd975df
|
Fixed incorrect auto-format of Firefox(Extracter) log messages
|
2014-04-10 17:19:56 -04:00 |
|
Richard Cordovano
|
1431d12a90
|
Eliminated duplication of ingest job cancellation check methods
|
2014-04-10 17:10:08 -04:00 |
|
Richard Cordovano
|
e8773786f4
|
Added overwrite flag to PlatformUtil resource file extraction method, use for pipeline config
|
2014-04-10 12:58:45 -04:00 |
|
Brian Carrier
|
4206ab4a10
|
Fixed device ID lookup error, updated device mapping file, renamed class
|
2014-04-07 16:06:46 -04:00 |
|
Samuel H. Kenyon
|
109cd14c98
|
Remove messageID tracking and passing from modules as class IngestMessage handles it automatically now
|
2014-04-03 22:49:17 -04:00 |
|
Brian Carrier
|
3abbc64ec9
|
added more checks to RR plug-ins to not display path of module when key is not found
|
2014-04-03 15:10:39 -04:00 |
|
Richard Cordovano
|
4f8617a16a
|
Tidied up ingest framework API
|
2014-03-26 17:12:24 -04:00 |
|
Richard Cordovano
|
7c2282e832
|
Renamed ingest job settings classes
|
2014-03-25 09:47:46 -04:00 |
|
Richard Cordovano
|
87bb0211f2
|
Merged in develop branch as of March 24, 2014
|
2014-03-24 12:35:48 -04:00 |
|